Security Posture Management

Use the Security Posture Management integration to maintain the confidentiality, integrity, and availability of your data in the cloud by continuously identifying configuration risks in your cloud infrastructure, like publicly exposed storage buckets and overly permissive networking objects. Read below to learn more about the components that make up security posture management; CSPM & KSPM.

Cloud Security Posture Management (CSPM)

CSPM discovers and evaluates the services in your cloud environment, like storage, compute, IAM, and more, against hardening guidelines defined by the Center for Internet Security (CIS) to help you identify and remediate configurations risks like:

• Publicly exposed storage buckets
• IAM Users without MFA enabled
• Networking objects that allow ingress to remote server administration ports (22, 3389, etc.)

And much more! For a complete overview of CSPM, including step-by-step getting started guidance, check out CSPM's documentation.

Kubernetes Security Posture Management (KSPM)

KSPM discovers and evaluates the components that make up your Kubernetes cluster against hardening guidelines defined by the Center for Internet Security (CIS) to help you identify and remediate configurations risks like:

• Kubelete servers that allow anonymous auth
• Unencrypted traffic to load balancers
• Admission of containers with allowPrivilegeEscalation permissions

And much more! Check out the KSPM getting started guide for step-by-step guidance on how to get started with KSPM.

Using C/KSPM

To use both CSPM and KSPM, you'll have to deploy each integration separately. After deploying either one or both integrations, the pages described below will begin to get populated with security posture data. Please read the respective use cases section for CSPM and KSPM for step-by-step instructions on how to use these pages to get insight into and improve your cloud security posture.

As questions come up, check out the KSPM FAQ or reach out to use directly in our community slack workspace in the #security or #cloud-security channels.

Changelog